CVE-2011-0465

N/A Unknown
Published: April 08, 2011 Modified: April 29, 2026
View on NVD

Description

xrdb.c in xrdb before 1.0.9 in X.Org X11R7.6 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in a hostname obtained from a (1) DHCP or (2) XDMCP message.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

Login to generate AI explanation

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory
http://cgit.freedesktop.org/xorg/app/xrdb/commit/?id=1027d5df07398c1507fb1fe3a9981aa6b4bc3a56
Source: cve@mitre.org
Patch
http://lists.fedoraproject.org/pipermail/package-announce/2011-April/057928.html
Source: cve@mitre.org
http://lists.freedesktop.org/archives/xorg-announce/2011-April/001635.html
Source: cve@mitre.org
Patch
http://lists.freedesktop.org/archives/xorg-announce/2011-April/001636.html
Source: cve@mitre.org
Patch
http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00002.html
Source: cve@mitre.org
http://secunia.com/advisories/44010
Source: cve@mitre.org
http://secunia.com/advisories/44012
Source: cve@mitre.org
http://secunia.com/advisories/44040
Source: cve@mitre.org
Vendor Advisory
http://secunia.com/advisories/44082
Source: cve@mitre.org
http://secunia.com/advisories/44122
Source: cve@mitre.org
http://secunia.com/advisories/44123
Source: cve@mitre.org
http://secunia.com/advisories/44193
Source: cve@mitre.org
http://slackware.com/security/viewer.php?l=slackware-security&y=2011&m=slackware-security.465748
Source: cve@mitre.org
http://www.debian.org/security/2011/dsa-2213
Source: cve@mitre.org
http://www.mandriva.com/security/advisories?name=MDVSA-2011:076
Source: cve@mitre.org
http://www.redhat.com/support/errata/RHSA-2011-0432.html
Source: cve@mitre.org
http://www.redhat.com/support/errata/RHSA-2011-0433.html
Source: cve@mitre.org
http://www.securityfocus.com/bid/47189
Source: cve@mitre.org
http://www.securitytracker.com/id?1025317
Source: cve@mitre.org
http://www.ubuntu.com/usn/USN-1107-1
Source: cve@mitre.org
http://www.vupen.com/english/advisories/2011/0880
Source: cve@mitre.org
Vendor Advisory
http://www.vupen.com/english/advisories/2011/0889
Source: cve@mitre.org
http://www.vupen.com/english/advisories/2011/0906
Source: cve@mitre.org
http://www.vupen.com/english/advisories/2011/0929
Source: cve@mitre.org
http://www.vupen.com/english/advisories/2011/0966
Source: cve@mitre.org
http://www.vupen.com/english/advisories/2011/0975
Source: cve@mitre.org
https://bugzilla.redhat.com/show_bug.cgi?id=680196
Source: cve@mitre.org
Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/66585
Source: cve@mitre.org
https://lwn.net/Articles/437150/
Source: cve@mitre.org
http://cgit.freedesktop.org/xorg/app/xrdb/commit/?id=1027d5df07398c1507fb1fe3a9981aa6b4bc3a56
Source: af854a3a-2127-422b-91ae-364da2661108
Patch
http://lists.fedoraproject.org/pipermail/package-announce/2011-April/057928.html
Source: af854a3a-2127-422b-91ae-364da2661108
http://lists.freedesktop.org/archives/xorg-announce/2011-April/001635.html
Source: af854a3a-2127-422b-91ae-364da2661108
Patch
http://lists.freedesktop.org/archives/xorg-announce/2011-April/001636.html
Source: af854a3a-2127-422b-91ae-364da2661108
Patch
http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00002.html
Source: af854a3a-2127-422b-91ae-364da2661108
http://secunia.com/advisories/44010
Source: af854a3a-2127-422b-91ae-364da2661108
http://secunia.com/advisories/44012
Source: af854a3a-2127-422b-91ae-364da2661108
http://secunia.com/advisories/44040
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
http://secunia.com/advisories/44082
Source: af854a3a-2127-422b-91ae-364da2661108
http://secunia.com/advisories/44122
Source: af854a3a-2127-422b-91ae-364da2661108
http://secunia.com/advisories/44123
Source: af854a3a-2127-422b-91ae-364da2661108
http://secunia.com/advisories/44193
Source: af854a3a-2127-422b-91ae-364da2661108
http://slackware.com/security/viewer.php?l=slackware-security&y=2011&m=slackware-security.465748
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.debian.org/security/2011/dsa-2213
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.mandriva.com/security/advisories?name=MDVSA-2011:076
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.redhat.com/support/errata/RHSA-2011-0432.html
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.redhat.com/support/errata/RHSA-2011-0433.html
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.securityfocus.com/bid/47189
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.securitytracker.com/id?1025317
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.ubuntu.com/usn/USN-1107-1
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.vupen.com/english/advisories/2011/0880
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
http://www.vupen.com/english/advisories/2011/0889
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.vupen.com/english/advisories/2011/0906
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.vupen.com/english/advisories/2011/0929
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.vupen.com/english/advisories/2011/0966
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.vupen.com/english/advisories/2011/0975
Source: af854a3a-2127-422b-91ae-364da2661108
https://bugzilla.redhat.com/show_bug.cgi?id=680196
Source: af854a3a-2127-422b-91ae-364da2661108
Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/66585
Source: af854a3a-2127-422b-91ae-364da2661108
https://lwn.net/Articles/437150/
Source: af854a3a-2127-422b-91ae-364da2661108

58 reference(s) from NVD

Quick Stats

CVSS v3 Score
N/A / 10.0
EPSS (Exploit Probability)
5.8%
92th percentile
Exploitation Status
Not in CISA KEV

Weaknesses (CWE)

CWE-20

Affected Vendors

matthias_hopf x

Related CVEs

CVE-2026-40941 N/A
CVE-2026-40084 6.5
CVE-2026-40083 7.2
CVE-2026-40082 5.4
CVE-2026-40080 6.1